Personal Data Protection Notice (KVKK)

Data controller

This notice is issued under Article 10 of the Turkish Personal Data Protection Law No. 6698 (KVKK). The data controller is Osmium Network Ltd.. Contact: info@investpig.com.

Personal data we process

Account data: email address, username and password (hashed by our authentication provider, Supabase Auth), and, if you sign in with Google, the basic profile data Google shares with us.

Usage data you create: watchlists, price alerts, portfolio entries, comments and notification device tokens.

Guest watchlist and preferences: stored only in your own browser (localStorage) and not sent to us unless you sign in.

Technical data: server logs including IP address, browser and request details, and a session cookie that keeps you signed in.

Purposes and legal bases (Art. 5)

Providing the account, watchlist, alert and portfolio features and keeping you signed in: necessary for the performance of a contract (Art. 5/2-c).

Security, abuse prevention, logging and service improvement: our legitimate interests, provided your fundamental rights are not harmed (Art. 5/2-f); and compliance with legal obligations (Art. 5/2-ç).

Optional features such as notifications and analytics cookies: your explicit consent where required (Art. 5/1).

Transfers, including abroad (Art. 9)

Data is shared only with service providers needed to run the site: hosting providers and our database and authentication provider (Supabase), and Google if you use Google sign-in. These providers may be located abroad, so your data may be transferred outside Türkiye in line with Article 9 of the KVKK. We do not sell personal data. Data is shared with public authorities only where the law requires.

Method of collection

Data is collected automatically through the website and app (forms, sign-in, your use of features, server logs and cookies) and in electronic form.

Your rights (Art. 11)

Under Article 11 you may: learn whether your data is processed; request information about it; learn the purpose and whether it is used accordingly; know the third parties it is transferred to in Türkiye or abroad; request correction of incomplete or incorrect data; request deletion or destruction; request that these actions be notified to third parties; object to an outcome against you produced solely by automated analysis; and claim compensation for damage caused by unlawful processing.

How to apply

Send your request in writing to Osmium Network Ltd., or by email to info@investpig.com, with your identity details and the subject of your request. We answer within 30 days at the latest, as the law requires. You may also complain to the Personal Data Protection Board (KVKK).